CVE-2020-23309

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0

Description The issue is related to an incorrect comparison in the parser parse statements function of the js-parser-statm.c component in the JerryScript JavaScript engine for the Internet of Things. This could potentially allow a remote attacker to cause a denial of service.

Recommendations For JerryScript version 2.2.0, as a temporary workaround, consider disabling the parser parse statements function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.